Resident operating system, usually held in low memory with interrupt vector.

A short computer program that is permanent ly resident or easily loaded into a computer, whose execution brings another, larger program, such as an operating system or its loader, into memory.

This resident part intercepts some API functions of the operating system and when these functions are called, new files get infected.